DeleteFileW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA WaitForSingleObjectEx ExitProcess FindFirstFileExW MoveFileExW RemoveDirectoryW GetCurrentThread SetThreadStackGuarantee CreateDirectoryW WaitForMultipleObjects TerminateProcess GetWindowsDirectoryW GetSystemDirectoryW SetFileInformationByHandle SetFileTime CreateFileW CreateEventW SetHandleInformation ReadConsoleW WriteConsoleW CopyFileExW DuplicateHandle GetCurrentProcess GetCurrentThreadId GetFullPathNameW SetLastError GetTimeZoneInformationForYear GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep GetFileAttributesW FlsFree GetSystemTimePreciseAsFileTime FlsAlloc IsThreadAFiber FlsSetValue GetFileType GetTempPathW FindNextFileW SetFilePointer LockFile GetDiskFreeSpaceW AreFileApisANSI FlushFileBuffers GetTickCount GetSystemTime GetSystemTimeAsFileTime GetFileSize LocalFree GetNativeSystemInfo DeleteFileA CreateFileA GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA CreateMutexW GetStartupInfoW FlsGetValue ExitThread IsProcessorFeaturePresent SetStdHandle GetFileSizeEx SetEndOfFile GetFullPathNameA SystemTimeToFileTime GetSystemInfo GetConsoleScreenBufferInfo SetFilePointerEx UnlockFile GetFileInformationByHandleEx CreateProcessW GetFileInformationByHandle GetExitCodeProcess WaitForSingleObject CloseHandle GetCurrentProcessId CreateThread GetLastError SleepEx SwitchToThread FindClose GetStdHandle SetConsoleCtrlHandler IsValidCodePage LCMapStringW CompareStringW LoadLibraryExW GetTimeZoneInformation UnhandledExceptionFilter IsDebuggerPresent GetCommandLineA FreeLibraryAndExitThread InitializeCriticalSectionEx EncodePointer RtlPcToFileHeader RtlUnwindEx InitializeSListHead SetUnhandledExceptionFilter WriteConsoleA GetModuleHandleExA FreeLibrary VirtualQuery VirtualFree VirtualProtect VirtualAlloc GetCurrentProcessorNumber TlsFree TlsSetValue TlsAlloc GetProcessTimes AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock GetEnvironmentVariableA DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException UnlockFileEx GetOEMCP HeapValidate HeapSize OutputDebugStringW FlushViewOfFile HeapCompact HeapDestroy FormatMessageA CreateFileMappingW MapViewOfFile HeapCreate WriteFile OutputDebugStringA CancelIo RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext QueryPerformanceFrequency GetModuleHandleA FormatMessageW GetModuleHandleW GetModuleHandleExW MultiByteToWideChar SetCurrentDirectoryW GetModuleFileNameW HeapAlloc SetEnvironmentVariableW GetEnvironmentVariableW DeviceIoControl LoadLibraryA WideCharToMultiByte GetProcAddress lstrlenW GetCommandLineW GetCurrentDirectoryW HeapFree HeapReAlloc GetProcessHeap GetOverlappedResult ReadFile QueryPerformanceCounter CompareStringOrdinal ReadFileEx FreeEnvironmentStringsW GetEnvironmentStringsW LockFileEx WriteFileEx GetACP GetCPInfo GetStringTypeW UnmapViewOfFile AddVectoredExceptionHandler

WakeByAddressSingle WaitOnAddress WakeByAddressAll

ProcessPrng

BCryptGenRandom

NtOpenFile NtWriteFile NtReadFile NtCreateNamedPipeFile RtlNtStatusToDosError RtlGetVersion

CertFreeCertificateChainEngine CertCloseStore CertGetCertificateChain CertOpenStore CertAddEncodedCertificateToStore CertFreeCertificateContext CertSetCertificateContextProperty CertFreeCertificateChain CertVerifyCertificateChainPolicy

SystemFunction036 AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

setsockopt send closesocket shutdown WSAGetLastError ioctlsocket getaddrinfo freeaddrinfo listen bind WSAStartup getsockname accept getpeername WSADuplicateSocketW WSASocketW select connect getsockopt recv